Let visitors create an account or sign in with their AiCB @username. Here's how to install the plugin, connect your site to AiCB in one click, set your options, and place the “Sign in with AiCB” button.
Upload the plugin zip and activate.
Click Connect to AiCB & approve.
Role, redirect, button.
Login screen or shortcode.
AiCB Login adds a “Sign in with AiCB” button to your site. Visitors authenticate with their AiCB @username on the AiCB hub and return signed in. The first sign-in creates a WordPress account automatically; later visits match the same account. The one button both registers and logs in — there's no separate sign-up form, and no passwords for you to manage.
You'll need: a WordPress site (5.6+, PHP 7.2+) and a free AiCB account to approve the connection. You can create the AiCB account during the connect step — there's nothing to set up in advance.
Plugins → Add New → Upload Plugin..zip, click Install Now, then Activate.Settings → AiCB Login.This is the whole setup — no API keys or secrets to copy.
Settings → AiCB Login, click Connect to AiCB.How the key stays safe: the secret is delivered to your server directly through a one-time, single-use claim code — it never appears in a browser URL, and you never copy or paste it. To rotate the key later, just click Reconnect.
Under Options on the same screen:
wp-login.php.The button appears on the WordPress login screen automatically (toggle it in Options). To put it anywhere else — a page, post or widget — use the shortcode:
[aicb_login]
Paste it into a Shortcode block, or straight into the editor. For visitors who are already signed in, it shows their connected @username instead of the button.
label | Custom button text. [aicb_login label="Continue with AiCB"] |
|---|---|
redirect | Where to send the user after sign-in (defaults to your Options setting, or the home page). [aicb_login redirect="https://your-site.com/account/"] |
In a PHP template you can instead call echo do_shortcode( '[aicb_login]' );.
If you already have users, they keep their accounts. While logged in, a member opens their WordPress profile and clicks Connect AiCB account to link their @username. After that, “Sign in with AiCB” logs them straight into the same account.
For safety, the plugin will not automatically take over an existing account just because an email address matches — that opt-in linking flow is the secure path. You can enable email matching in Options if you specifically trust that AiCB emails are verified.
You normally don't need this — “Connect to AiCB” does it for you. Under Advanced — manual setup you can point at a self-hosted AiCB hub or paste a site identifier and secret issued out-of-band. The hub URL defaults to https://aicb.au.
| Identity hub | AiCB (aicb.au) by default. Configurable for a self-hosted hub. |
|---|---|
| Sign-in & sign-up | One button does both — first sign-in auto-creates a WordPress user; later sign-ins match it. |
| Security | Per-site HMAC-SHA256 signed requests and assertions, verified in constant time; 5-minute freshness; single-use nonces (replay protection). |
| Account safety | No takeover by email match (off by default); existing users link via the authenticated profile flow. Auto-created accounts are password-less (SSO-only). |
| Placement | Login-screen button + [aicb_login] shortcode (attributes: label, redirect). |
Yes — they sign in with their AiCB @username. If they don't have one, AiCB lets them create a free account during sign-in, and your WordPress account is created for them automatically on the way back.
Yes. An existing user links their AiCB @username from their WordPress profile while logged in; after that, “Sign in with AiCB” logs them into that same account.
It's on the WordPress login screen by default, and you can place it anywhere with the [aicb_login] shortcode (in a page, post or widget), or via do_shortcode() in a template.
Every request and assertion is signed with a per-site secret and verified in constant time, with a short expiry and single-use nonces to prevent replay. The plugin won't adopt an existing account by email unless you opt in, and auto-created accounts are password-less (SSO only).
Uninstalling removes the plugin settings but leaves user links in place, so nothing breaks if you reinstall.
AiCB Login connects to the AiCB identity hub you configure (by default aicb.au). When a visitor chooses to sign in, their browser is redirected there to authenticate and returns with a signed assertion containing their @username, email and plan. This plugin is independent; “WordPress” is a trademark of the WordPress Foundation.
Single sign-on, membership, payments or something custom — tell us what you need and we'll come back with a plan and a fixed quote.